the grugq's newsletter

Subscribe
Archives
January 27, 2024

January 27, 2024

January 27, 2024

very funny to me that the inventor of the .webp file extension actively tries to defend himself on this website pic.twitter.com/8AmjopLW9W

— nate @run da op (@animeterrorist) January 25, 2024


Microsoft's Dangerous Addiction To Security Revenue

Microsoft's latest announcement of a breach by the Russian intelligence services demonstrates how their addiction to security revenue has warped product decisions.

Almost definitely the first time I’m including a LinkedIn post.


Last January, I noticed something peculiar in my 2yo’s bedroom that - after a year of obsessive reporting - led me to a profound cosmic revelation about what’s even possible in our universe. A 🧵. pic.twitter.com/pHFStIdawh

— Latif Nasser (@latifnasser) January 26, 2024

Thread by @latifnasser on Thread Reader App – Thread Reader App

@latifnasser: Last January, I noticed something peculiar in my 2yo’s bedroom that - after a year of obsessive reporting - led me to a profound cosmic revelation about what’s even possible in our universe. A 🧵....…


It's physically impossible to keep up with the research being released nowadays. Basically life becomes a mix of FOMO, Imposter Syndrome and eventual burnout😭

What's the solution you might ask? Welp it turns out, no one is actually keeping up with everything. 😂Everyone is…

— Nasreddine Bencherchali (@nas_bench) January 27, 2024


So I went through a cool rabbit hole this morning following a question in our Discord:

"Why can't @PentesterLab authentication 03 challenge be solved via MySQL Truncation..."

Let's dive in 👇

— Louis Nyffenegger (@snyff) January 27, 2024


I read all the #autopwn2own articles so you don’t have to. Here is the best one. From what I read it looks like the gateway module held up which means attackers can’t control brakes/steering/etc. That is a win for the tesla security team. https://t.co/Z9PtaIhwOM

— Charlie Miller (@0xcharlie) January 27, 2024


I feel like public relations are not the real problem here. https://t.co/y7subp3KpS

— Eva (@evacide) January 27, 2024

BREAKING: Vallejo police have been quietly working on a public relations overhaul that would include new patches, a new name, and badges that are harder to deface when officers kill civilians, Open Vallejo has learned. https://t.co/YHQB8ef8Nr

— Open Vallejo (@OpenVallejo) January 27, 2024


Re: Midnight Blizzard breach of Microsoft, this bears repeating:

The AppRoleAssignment.ReadWrite.All MS Graph app role BYPASSES the consent process. This is BY DESIGN. This app role is EXTRAORDINARILY dangerous.

Read more in @sahilmalik's blog post: https://t.co/hiDR57QUzR

— Andy Robbins (@_wald0) January 26, 2024


Anyone can become a superpower using our patented two step process:

1.) wait for the major powers of Eurasia to self-immolate in a spectacularly apocalyptic struggle for supremacy

2.) be a very large ocean away from this https://t.co/nLZBt6eHd5

— Open Source Stupidity (OSSTU) Starfish (@IRHotTakes) January 27, 2024

How the fuck did you guys ever become a superpower. Jesus Christ.

— Oz Katerji (@OzKaterji) January 26, 2024


Don't miss what's next. Subscribe to the grugq's newsletter:

Start the conversation:

Be the first to share your thoughts

X